What we collect
Most of what we store is information you type or choose to upload. The two exceptions, notification tokens and app performance data, are described at the end of this list.
- Account. Your email address and a password, or, if you continue with Apple or Google, the account identifier and email address they share with us (Apple may give a private relay address instead of your real one). Passwords are hashed by our authentication provider and are never visible to us; we never see your Apple or Google password. A display name and a profile photo are optional; the name is what other family members see instead of your email.
- Your dogs. Name, breed, optional date of birth, and an optional photo.
- Restroom breaks.The date and time of each break, whether it was a urination and/or a bowel movement, and which member of the dog's group logged it. Optionally, a stool score, whether it was an accident, and a note.
- Care records. Vet appointments (title, vet name, location, notes, date) and medications (name, dosage, reminder time, notes) that you enter.
- Family sharing.When you invite someone, we store the email address you entered and a six-digit invite code until the invite is redeemed or expires. A sitter invite also stores the date the sitter's access ends.
- Paired watches. If you pair an Apple Watch or Wear OS watch, we store the device name and when it was paired and last seen.
- Notifications.If you allow notifications in the mobile app, we store your phone's push token and its time zone, along with the alerts you turn on and your quiet hours. The time zone is used only to respect quiet hours and to time reminders; it is not your location.
- App performance.The mobile app includes Expo's performance-monitoring library, which reports how long the app takes to start and to show each screen, and any errors that crash it, together with the device model, operating system and app version, and a random identifier for that installation. It does not include your account, email, or anything you have entered, and it is not linked to you.
What stays on your device
- Face ID / fingerprint lock. If you turn it on, your phone checks your face or fingerprint itself. The app only learns whether the check passed; no biometric data reaches the app or us.
- Siri and the home-screen widget.Your dogs' names and last break are kept on the phone so Siri and the widget can show them. Siri actions sign in with their own session, stored in the phone's keychain.
- Vet reports. A vet report PDF is created on your phone and goes only where you choose to share it.
What we do not collect
- No advertising or tracking.The iOS and Android apps contain no ad network and no tracking framework, and nothing that records how you use the app. We do not use the advertising identifier and we do not track you across other companies' apps or websites.
- No location data, contacts, calendar, microphone or health data. The app requests photo-library access only at the moment you tap to choose a profile or dog photo, and reads only the image you pick.
- No payment information. The app has no purchases or subscriptions.
- We never sell your personal information, and we never share it with advertisers or data brokers.
How we use it
Solely to run the app: to sign you in, to show your dogs' break history and care records to you and to the family members you invite, to send the notifications you turn on (for example, when a family member takes your dog out, or a reminder when a break is overdue), to keep the app fast and fix crashes, and to email you an invitation code, a sign-up confirmation code, or a password-reset code. We do not send marketing email or marketing notifications.
Accounts that sign up but never enter their confirmation code are deleted automatically after seven days.
Who processes it
- Supabase — hosts the database, the sign-in system and the photo storage. All of the data listed above lives there.
- Resend — delivers transactional email (invitation, confirmation and password-reset codes). It receives the recipient address and the message.
- Vercel— hosts this website and the app's API, and keeps standard server request logs.
- Expo— relays push notifications to Apple Push Notification service and Google's Firebase Cloud Messaging (which deliver them to your phone), and receives the app performance data described above. For a notification it receives the push token and the message text.
- Cloudflare Turnstile — checks that sign-up, password-reset and resend-code requests come from a person rather than a script. It sees your IP address and browser signals for that check.
- Apple and Google — only if you choose to sign in with them; they confirm your identity to us.
- Sentry — records errors on this website so that crashes can be diagnosed. An error report can include the URL, the browser type and the IP address the request came from. Sentry is not included in the mobile app.
These are service providers acting on our instructions. None of them are permitted to use your data for their own purposes.
Product links
The Shop section links to products on Amazon. As an Amazon Associate we earn from qualifying purchases. These are ordinary outbound links, not an advertising SDK — nothing tracks you inside the app, and once you tap through, Amazon's own privacy policy applies. We receive only aggregate commission reporting from Amazon and never learn who bought what.
Sharing a dog
Inviting a family member to a dog lets them see and add that dog's breaks, care records and photos, and lets them see the display name and photo of everyone else sharing that dog. That is the entire point of the feature, so invite only people you intend to share with. You can remove a member at any time from the profile screen.
Keeping it and deleting it
We keep your data until you delete it. You can delete your entire account from the app — Profile → Account → Delete account — or from this page, without contacting us.
Deleting your account immediately and permanently removes:
- your sign-in record, email address, display name and profile photo;
- every dog only you have access to, along with its photo, its entire break history, and its vet and medication records;
- your paired watches, your notification tokens and settings, and any invitations addressed to your email.
If you signed in with Apple, deleting your account also revokes the app's access to your Apple ID.
A dog you share with other people is not deleted — the other members keep it. You are removed from it, and the breaks you logged for that dog stay in its history but are no longer attributed to you. Deletion is not reversible; residual copies may persist briefly in encrypted backups before being overwritten.
Security
Data is encrypted in transit. Passwords are stored only as hashes. Database rules restrict every record to the accounts linked to it, so one household cannot read another's.
Children
The app is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, email us and we will remove it.
Your rights
You can view and edit everything in the app itself, and delete all of it as described above. To request a copy of your data, or for anything else — including requests under the GDPR or CCPA — email didugo.app@gmail.com. We do not sell personal information, so there is nothing to opt out of.
Changes
If this policy changes, the effective date at the top changes with it. Material changes will be announced in the app.